PGP and key storage.

steven.soroka@mts.mb.ca
Thu, 1 Oct 1998 11:48:27 -0500

• Next message: Derek Atkins: "Re: PGP and key storage."
• Previous message: Thomas Roessler: "Re: propose: `cypherpunks license' (Re: Wanted: Twofish source code)"
• Next in thread: Derek Atkins: "Re: PGP and key storage."
• Reply: Derek Atkins: "Re: PGP and key storage."
• Reply: Mike Stay: "Re: PGP and key storage."
• Maybe reply: steven.soroka@mts.mb.ca: "Re: PGP and key storage."

Question.. How does PGP store its private keys that are encrypted with the
passphrases?
Is it a simple xor? Or is the passphrase hashed into a key and then xored?

The reason I ask, is because I'm wondering, if I have more than one key
pair... is there a security
risk using the same passphrase? (other than compromise of one means
compromise of the other).
Is it possible for me to xor the two private keys together and retrieve the
passphrase? (or the hash of
the passphrase?)

     Thanks!

• Next message: Derek Atkins: "Re: PGP and key storage."
• Previous message: Thomas Roessler: "Re: propose: `cypherpunks license' (Re: Wanted: Twofish source code)"
• Next in thread: Derek Atkins: "Re: PGP and key storage."
• Reply: Derek Atkins: "Re: PGP and key storage."
• Reply: Mike Stay: "Re: PGP and key storage."
• Maybe reply: steven.soroka@mts.mb.ca: "Re: PGP and key storage."